dkim setting for sendmail still wrong

Submitted by sgrayban on Thu, 12/09/2010 - 01:37

You are using the wrong format for input filters in sendmail...

this wont work...

INPUT_MAIL_FILTER(`dkim-filter', `S=inet:localhost:8891')

this does...

INPUT_MAIL_FILTER(`dkim-filter', `S=inet:8891@localhost')dnl



sendmail554 5.0.0 /etc/mail/sendmail.cf: line 2055: Xdkim-filter: bad address localhost:8891 (expected port@host)

Status: 
Closed (fixed)

Comments

Submitted by sgrayban on Thu, 12/09/2010 - 01:41

and dont forget to add dnl at the end... that is also required

Submitted by JamieCameron on Thu, 12/09/2010 - 12:22

Ok, thanks .. I will fix up the format for a inet socket in the next release. The default is to use a socket file, so I never noticed this.

Is that dnl really needed though? Because on my system it works fine without it.

Submitted by sgrayban on Thu, 12/09/2010 - 17:25

I know in the old versions you had to end each line with dnl so I didn't know if that had changed.

Submitted by JamieCameron on Thu, 12/09/2010 - 17:28

You might want to try removing this and letting us know if it works for you ..

Submitted by JamieCameron on Thu, 12/09/2010 - 17:29

You might want to try removing this and letting us know if it works for you ..

Submitted by sgrayban on Thu, 12/09/2010 - 20:38

ok so removing the ending dnl is ok now. It used to throw a error about line endings.

Just make sure what line are you using to create the INPUT milter ? The socket or inet address ?

Submitted by JamieCameron on Thu, 12/09/2010 - 22:38

It depends on what is in /etc/sysconfig/dkim-milter . But by default, a socket file will be used.

Submitted by sgrayban on Thu, 12/09/2010 - 23:53

Debian uses /etc/default/dkim-filter

according to the docs you should also set the timeout and fail timeout as well.

My input string has...

INPUT_MAIL_FILTER(`dkim-filter', `S=inet:8891@localhost, F=,T=S:30s;R:1m')

I suggest using the timeouts in sendmail.mc so emails wont be rejected if the milter isn't running for some weird reason.

TIME OUT FEATURES AND INFORMATION

C: is the connection time between Sendmail and the milter.
S: is the time for sending data from Sendmail to milter.
R: is the recieving time between Sendmail and the milter.
E: is the end of message time between Sendmail and milter.
R Reject connection if filter is not available.
T Temporarily fail connection if filter is not available.

If neither F=R or F=T is specified, the sendmail command passes the message as if the filter is not present.

The default for the timeouts is C:5m;S:10s;R:10s;E:5m

Submitted by JamieCameron on Fri, 12/10/2010 - 00:51

From what I've seen, those options aren't strictly needed - if the milter is down, Sendmail just sends out the message as normal with no extra headers.

Submitted by sgrayban on Thu, 01/06/2011 - 00:30

This still hasn't been fixed...

INPUT_MAIL_FILTER(`dkim-filter', `S=inet:localhost:8891')

That is wrong so please fix this. It should be

INPUT_MAIL_FILTER(`dkim-filter', `S=inet:8891@localhost')

Submitted by sgrayban on Thu, 01/06/2011 - 00:36

I think this is the part that is broken in dkim-lib.pl

my $newmilter = $dkim->{'port'} ? "inet:localhost:$dkim->{'port'}"

Submitted by JamieCameron on Thu, 01/06/2011 - 14:28

Yes .. the next release will include a fix for this. I actually implemented this a week or two ago, but forgot to update this bug..

Submitted by Issues on Thu, 01/20/2011 - 18:49

Automatically closed -- issue fixed for 2 weeks with no activity.